fixing auth, routes